Bug 11491 - ipa-server не устанавливается
Summary: ipa-server не устанавливается
Status: VERIFIED FIXED
Alias: None
Product: ROSA Fresh
Classification: ROSA-based products
Component: Packages from Main (show other bugs)
Version: Server
Hardware: All Linux
: Normal normal
Target Milestone: ---
Assignee: ROSA Linux Bugs
QA Contact: ROSA Linux Bugs
URL:
Whiteboard:
Depends on:
Blocks: 11461
  Show dependency treegraph
 
Reported: 2021-09-09 11:32 MSK by Dmitry Postnikov
Modified: 2022-01-11 16:45 MSK (History)
3 users (show)

See Also:
Platform: 2021.1
ROSA Vulnerability identifier:
RPM Package:
ISO-related:
Bad POT generating:
Upstream:
v.potapov: qa_verified+
v.potapov: published+


Attachments
ipasrv1.png (57.95 KB, image/png)
2021-09-09 11:32 MSK, Dmitry Postnikov
Details
ipasrv2.png (10.46 KB, image/png)
2021-09-09 13:45 MSK, Dmitry Postnikov
Details
ipasrv3.png (23.52 KB, image/png)
2021-09-13 11:52 MSK, Dmitry Postnikov
Details
ipasrv1_log.txt (14.25 KB, text/plain)
2021-09-13 11:55 MSK, Dmitry Postnikov
Details
ipasrv2_log.txt (101.65 KB, text/plain)
2021-10-05 15:14 MSK, Dmitry Postnikov
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Dmitry Postnikov 2021-09-09 11:32:13 MSK
Created attachment 5508 [details]
ipasrv1.png

freeipa сервер не ставится
======================
[root@dc1 ~]# ipa-server-install -p 12345678 -a 12345678
Traceback (most recent call last):
  File "/usr/sbin/ipa-server-install", line 23, in <module>
    from ipaserver.install import ipa_server_install
  File "/usr/lib/python3.8/site-packages/ipaserver/install/ipa_server_install.py", line 7, in <module>
    from ipapython.install import cli
  File "/usr/lib/python3.8/site-packages/ipapython/install/cli.py", line 17, in <module>
    from ipapython import admintool
  File "/usr/lib/python3.8/site-packages/ipapython/admintool.py", line 33, in <module>
    from ipapython import config
  File "/usr/lib/python3.8/site-packages/ipapython/config.py", line 35, in <module>
    from ipapython.dnsutil import query_srv
  File "/usr/lib/python3.8/site-packages/ipapython/dnsutil.py", line 35, in <module>
    from ipapython.ipautil import UnsafeIPAddress
  File "/usr/lib/python3.8/site-packages/ipapython/ipautil.py", line 56, in <module>
    from ipaplatform.constants import User, Group
  File "<frozen importlib._bootstrap>", line 991, in _find_and_load
  File "<frozen importlib._bootstrap>", line 975, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 655, in _load_unlocked
  File "<frozen importlib._bootstrap>", line 618, in _load_backward_compatible
  File "/usr/lib/python3.8/site-packages/ipaplatform/_importhook.py", line 34, in load_module
    platform_mod = importlib.import_module(alias)
  File "/usr/lib64/python3.8/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "/usr/lib/python3.8/site-packages/ipaplatform/rosa/constants.py", line 11, in <module>
    class RosaConstantsNamespace(BaseConstantsNamespace):
  File "/usr/lib/python3.8/site-packages/ipaplatform/rosa/constants.py", line 14, in RosaConstantsNamespace
    HTTPD_USER = User("apache")
NameError: name 'User' is not defined
[root@dc1 ~]#
=================================

[root@dc1 ~]# rpm -qa | grep ipa
python3-ipaclient-4.9.6-1.noarch
ipa-common-4.9.6-1.noarch
ipa-server-4.9.6-1.x86_64
ipa-client-common-4.9.6-1.noarch
python3-ipalib-4.9.6-1.noarch
freeipa-healthcheck-core-0.5-2.noarch
ipa-server-common-4.9.6-1.noarch
ipa-client-4.9.6-1.x86_64
python3-ipaserver-4.9.6-1.noarch
ipa-server-dns-4.9.6-1.noarch
lib64sss_ipa_hbac0-2.3.0-2.x86_64
Comment 1 Dmitry Postnikov 2021-09-09 13:45:18 MSK
Created attachment 5509 [details]
ipasrv2.png

При удалении ipa-server, удаляется ipa-client, но в пакете ipa-client ошибка.

====================
  Удаление         : ipa-client-4.9.6-1.x86_64                                                                                                                      16/451
  Запуск скриптлета: ipa-client-4.9.6-1.x86_64                                                                                                                      16/451
/var/tmp/rpm-tmp.N9U9se: строка 10: синтаксическая ошибка: неожиданный конец файла
предупреждение: %postun(ipa-client-4.9.6-1.x86_64) scriptlet failed, exit status 2

Error in POSTUN scriptlet in rpm package ipa-client
====================
Comment 2 Aleksandr Proklov 2021-09-10 06:53:07 MSK
https://abf.io/import/ipa/commit/5a7fd9c7067f8acbbeff2845963eb97960197835

%postun почему не отрабатывает, я не смог установить, на вид все нормально в нем
Comment 3 Dmitry Postnikov 2021-09-13 11:52:19 MSK
Created attachment 5519 [details]
ipasrv3.png

Сейчас вот такую ошибку выдает. Как нас скрине.

=========================
Configuring ipa-custodia
  [1/5]: Making sure custodia container exists
  [2/5]: Generating ipa-custodia config file
  [3/5]: Generating ipa-custodia keys
  [4/5]: starting ipa-custodia
  [5/5]: configuring ipa-custodia to start on boot
Done configuring ipa-custodia.
Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes
  [1/28]: configuring certificate server instance
Failed to configure CA instance
See the installation logs and the following files/directories for more information:
  /var/log/pki/pki-tomcat
  [error] RuntimeError: CA configuration failed.
CA configuration failed.
The ipa-server-install command failed. See /var/log/ipaserver-install.log for more information
[root@dc1 ~]#
=============================
Comment 4 Dmitry Postnikov 2021-09-13 11:55:16 MSK
Created attachment 5520 [details]
ipasrv1_log.txt

Вот что в логах при этом.
Comment 5 Aleksandr Proklov 2021-09-14 09:04:10 MSK
https://abf.io/import/ipa/commit/6bfef44ba75677c1b45af11ff08e1a7945d938a6

pkispawn теперь без опции --debug видимо
Comment 6 Dmitry Postnikov 2021-10-05 15:14:53 MSK
Created attachment 5537 [details]
ipasrv2_log.txt

Прошло 2 недели (пока в отпуске был).

Ипа не ставится до сих пор. Лог установки приаттачил.
Comment 7 Aleksandr Proklov 2021-10-14 13:26:01 MSK
починилось?
Comment 8 Aleksandr Proklov 2021-12-21 10:28:03 MSK
кто будет закрывать?
Comment 9 Aleksandr Proklov 2021-12-28 09:28:23 MSK
(In reply to Dmitry Postnikov from comment #6)
> Created attachment 5537 [details]
> ipasrv2_log.txt
> 
> Прошло 2 недели (пока в отпуске был).
> 
> Ипа не ставится до сих пор. Лог установки приаттачил.

No such file or directory: 'pki-server' 
Куда делся?
Comment 10 Dmitry Postnikov 2021-12-28 14:49:24 MSK
https://bugzilla.rosalinux.ru/show_bug.cgi?id=11735#c3
C этими контейнерами Ипа ставится и работает.
Comment 11 Dmitry Postnikov 2021-12-28 16:34:06 MSK
slapi-nis 0.56.7-1
- updated
- fixed dependencies from sssd
https://abf.io/build_lists/3966943
https://abf.io/build_lists/3966944
https://abf.io/build_lists/3966945

ipa 4.8.10-3
- fixed sh syntax in scriptlet
https://abf.io/build_lists/3966949
https://abf.io/build_lists/3966950
https://abf.io/build_lists/3966951

389-ds-base 1.4.4.4-7
- removed not existing systemd unit from scriptlet
https://abf.io/build_lists/3966952
https://abf.io/build_lists/3966953
https://abf.io/build_lists/3966954
Comment 12 Dmitry Postnikov 2021-12-28 16:34:54 MSK
(In reply to Dmitry Postnikov from comment #11)
> slapi-nis 0.56.7-1
> - updated
> - fixed dependencies from sssd
> https://abf.io/build_lists/3966943
> https://abf.io/build_lists/3966944
> https://abf.io/build_lists/3966945
> 
> ipa 4.8.10-3
> - fixed sh syntax in scriptlet
> https://abf.io/build_lists/3966949
> https://abf.io/build_lists/3966950
> https://abf.io/build_lists/3966951
> 
> 389-ds-base 1.4.4.4-7
> - removed not existing systemd unit from scriptlet
> https://abf.io/build_lists/3966952
> https://abf.io/build_lists/3966953
> https://abf.io/build_lists/3966954

Проверено, отправлено в тестинг
***********************************
Comment 13 Aleksandr Proklov 2021-12-28 16:53:09 MSK
> ipa 4.8.10-3
> - fixed sh syntax in scriptlet
> https://abf.io/build_lists/3966949
> https://abf.io/build_lists/3966950
> https://abf.io/build_lists/3966951
> 
> 389-ds-base 1.4.4.4-7
> - removed not existing systemd unit from scriptlet
> https://abf.io/build_lists/3966952
> https://abf.io/build_lists/3966953
> https://abf.io/build_lists/3966954

------------------------------------
published and + tevent